void oidFormat() {
        assertAll(() -> assertTrue(OID_PATTERN.matcher(SpnegoConstants.SPNEGO_MECHANISM).matches(), "Invalid OID: SPNEGO_MECHANISM"),
                () -> assertTrue(OID_PATTERN.matcher(SpnegoConstants.KERBEROS_MECHANISM).matches(), "Invalid OID: KERBEROS_MECHANISM"),
                () -> assertTrue(OID_PATTERN.matcher(SpnegoConstants.LEGACY_KERBEROS_MECHANISM).matches(),
                        "Invalid OID: LEGACY_KERBEROS_MECHANISM"),

        if (username.length() > MAX_USERNAME_LENGTH) {
            throw new IllegalArgumentException("Username exceeds maximum length: " + username.length());
        }
        if (!username.isEmpty() && !VALID_USERNAME.matcher(username).matches()) {
            throw new IllegalArgumentException("Username contains invalid characters: " + username);
        }
    }

    /**
     * Validates domain name
     *

        // Check various forms of directory traversal
        if (TRAVERSAL_PATTERN.matcher(path).find()) {
            return true;
        }

        // Check encoded traversals
        if (ENCODED_TRAVERSAL.matcher(path).find()) {
            return true;
        }

        // Check Unicode encoded traversals
        if (UNICODE_TRAVERSAL.matcher(path).find()) {
            return true;
        }

                // Check field name follows convention
                assertTrue("Field name should match pattern: " + field.getName(), labelPattern.matcher(field.getName()).matches());

                // Check field value follows convention
                field.setAccessible(true);
                String value = (String) field.get(null);

			msg:  "key can't be empty",
		}
	}
	return nil
}

// Empty indicates if kv is not set
func (kv BatchJobKV) Empty() bool {
	return kv.Key == "" && kv.Value == ""
}

// Match matches input kv with kv, value will be wildcard matched depending on the user input
func (kv BatchJobKV) Match(ikv BatchJobKV) bool {
	if kv.Empty() {
		return true
	}
	if strings.EqualFold(kv.Key, ikv.Key) {

        KerberosAuthData mockAuthData2 = mock(KerberosAuthData.class);

        // Mock the parse method to return two different objects based on input
        // Must use matchers for all arguments when using any matcher
        mockedStaticAuthData.when(() -> KerberosAuthData.parse(eq(1), eq(new byte[] { 0x01 }), any(Map.class)))
                .thenReturn(Collections.singletonList(mockAuthData1));

        assertTrue(manager.matches(request));

        request.setRequestURI("/api/v2/label");
        assertTrue(manager.matches(request));

        request.setRequestURI("/api/search");
        assertFalse(manager.matches(request));

        request.setRequestURI("/other/v1/search");
        assertFalse(manager.matches(request));
    }

        assertTrue(tree.matches("testShare", "testService"));
        assertTrue(tree.matches("TESTSHARE", "testService"));
        assertTrue(tree.matches("testshare", "TESTSERVICE"));

        // Test matching share with null service
        assertTrue(tree.matches("testShare", null));

        // Test matching share with service starting with "??"
        assertTrue(tree.matches("testShare", "??otherService"));

        NdrBuffer decodeBuffer = new NdrBuffer(buffer, 0);
        lsarpc.LsarDomainInfo decodedInfo = new lsarpc.LsarDomainInfo();
        decodedInfo.decode(decodeBuffer);

        // Verify the decoded data matches
        assertEquals(domainInfo.name.length, decodedInfo.name.length);
        assertEquals(domainInfo.name.maximum_length, decodedInfo.name.maximum_length);
        assertNotNull(decodedInfo.name.buffer);

        // same auth instance => matches
        assertTrue(s1.matches(a1));
        // different instance but equal content => matches
        assertTrue(s1.matches(a2));
        // not equal => no match
        NtlmPasswordAuthentication other = new NtlmPasswordAuthentication("OTHER", "u", "p");
        assertFalse(s1.matches(other));
    }

    @Test
    void toStringContainsKeyFields() {